Reproduce “Crisis Communication in the Face of Data Breaches” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Jukka Ruohonen, Kalle Hjerppe, Katleena Kortesuo
An analysis of eight Finnish data breach incidents reveals how organizations manage crisis communication, demonstrating that early notification to authorities and acceptance of responsibility are crucial for effective responses, while integrating the specific requirements of GDPR and NIS2 directives. The study highlights the complexities faced by public sector entities and identifies gaps in victim support strategies.
Key insights
- Effective data breach crisis communication does not follow a universal strategy, with organizational responsibility being a critical situational determinant, consistent with SCCT.
- Law-imposed notifications to public authorities (like DPAs and CSIRTs) are a crucial yet often overlooked factor for successful data breach crisis communication.
- The practice of 'stealing the thunder' (early self-disclosure and communication) is characteristic of successful cases, significantly mitigating negative public perception.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.